JWT 初试

1. 安装jose-jwt
2. 安装openssl生成.pfx证书
   下载地址：openssl
   运行并按顺序输入以下命令

   genrsa -out test1.key 1024

    req -new -x509 -key test1.key -out test1.cer -days 3650 -subj /CN=test.com

    pkcs12 -export -CSP "Microsoft Enhanced RSA and AES Cryptographic Provider" -out test2.pfx -inkey test1.key -in test1.cer

    

3. 编写代码
    

           [HttpPost]
           [Route("Login2")]
           public TokenInfo Login2([FromBody] LoginInfo RequestLogin)
           {
               TokenInfo _tokeninfo = new TokenInfo();
               var payload = new Dictionary<string, object>()
               {
                   { "name", "vortex" },
                   { "exp", 180 }
               };
   
               var privateKey = new X509Certificate2("d:\\test2.pfx", "1234", X509KeyStorageFlags.MachineKeySet).PrivateKey as RSACryptoServiceProvider;
               string token = Jose.JWT.Encode(payload, privateKey, JwsAlgorithm.RS256);
               _tokeninfo.RT_Message = "success";
               _tokeninfo.Token = token;
   
               return _tokeninfo;
           }

   返回信息如下：
   
    

           [HttpPost]
           [Route("Login3")]
           public string Login3([FromBody] string token)
           {
               token = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYW1lIjoidm9ydGV4IiwiZXhwIjoxODB9.exKk-dSzf3yrlDoAY1FPNJ1WYv4lW9VEWm8HtHu3ngznxNwyMZzyYj4fonzgcXxtPofhyvTeTrwBFcDLA_8x10qLDnt4hqQJ6YHrt2Eb1ySn46Pi-2PbFdjqZ_L1n-7dnqRT39mG3GHkSGFehy3SraZJcWKU-0u61V7LbcJ-GAg";
   
               var privateKey = new X509Certificate2("d:\\test2.pfx", "1234", X509KeyStorageFlags.Exportable | X509KeyStorageFlags.MachineKeySet).PrivateKey as RSACryptoServiceProvider;
   
               string json = Jose.JWT.Decode(token, privateKey);
   
               return json;
           }

   返回信息如下：
   

参考链接

Windows安装使用Openssl

创建openssl pfx证书文件

PKCS#12

JWT官网

jose-jwt

解决用SHA256算法做私钥签名时，遇到“指定的算法无效”的问题

生成认证中心的 PKCS#12 文件

将证书文件转换为 PKCS#12 格式

PKCS 15 个标准

RSA官网